CVE-2023-31086

概要

参考情報

• patchstack.com/database/vulnerability/giveasap/wordpress-simple-giveaways-plugin-2-45-1-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

simple giveaways のその他の脆弱性

• CVE-2023-1122中 4.8The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its Giveaways options, which could allow high privi…
• CVE-2023-1121中 4.8The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow high privilege user…
• CVE-2023-1120中 4.8The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow high privilege user…
• CVE-2021-24298中 6.1The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, th…